WO2011116695A1

WO2011116695A1 - Method and network processor for implementing multi-service forwarding

Info

Publication number: WO2011116695A1
Application number: PCT/CN2011/072084
Authority: WO
Inventors: 孙蓓; 钱勇
Original assignee: 中兴通讯股份有限公司
Priority date: 2010-03-26
Filing date: 2011-03-23
Publication date: 2011-09-29
Also published as: CN101820392A; CN101820392B

Abstract

Disclosed are a method and a network processor for implementing multi-service forwarding. The method includes: after receiving a message, analyzing the virtual local area network (VLAN) information carried in the message according to the service configuration; searching for a forwarding identification according to the access port information of the message and the VLAN information; according to the destination media access control (MAC) address information and the forwarding identification carried in the message, searching the MAC address table for the information of the destination port; according to the search result, transmitting the message to the found destination port or the port corresponding to the forwarding identification. By integrating and abstracting the ordinary 2-layer (L2) service, the 802.1Q in 802.1Q (QinQ) service and the L2 virtual private network (VPN) service, abstracting and integrating the forwarding tables of the three kinds of the service, and designing the forwarding processes of the three kinds of the service in one process, the invention greatly saves the instruction space and list item resources of the network processor, reduces the load of the control plane, and improves the extensibility and compatibility.

Description

Method and network processor for realizing multi-service forwarding

Technical field

The present invention relates to the field of data communications, and in particular, to a method and network processing for implementing multi-service forwarding, such as a common Layer 2, QinQ (802.1Qin802.1Q, VLAN dual stacking) service, and an L2 VPN (Virtual Private Network). Device.

Background technique

With the rapid development of the network today, network processors are becoming more and more widely used due to their flexible programmability and high processing performance. Network processors need to implement multiple services with limited instruction space and limited resource constraints. Currently, MPLS (Multiprotocol Label Switching) VPN services have been widely applied to the existing network. MPLS-based L2 VPN (Layer 2 VPN) has VPLS (Virual Private LAN Service) and VPWS (Virtual Private Wire Service). VPLS can provide multi-point to multi-point VPN technology. VPWS provides point-to-point Layer 2 VPN technology. Due to its different technologies, it is reflected in the forwarding process. At the same time, L2 VPN access modes are various, such as port-based access, port-based and VLAN-based access, port-based, and two-layer VLAN (Virtual Local Area Network) access. The network processor needs to implement multiple access and forwarding of L2VPN in a limited instruction space, and must implement basic Layer 2 forwarding and QinQ services at the same time.

In the previous implementation process, the L2 VPN technology and the common Layer 2 forwarding and the QinQ implementation are processed separately. Different entries need to be designed for different services. At the same time, different forwarding processing flows are designed, which not only greatly consumes resources. Moreover, because the service is differentiated and processed, the instruction space is wasted, which greatly affects the performance of the network processor, and also imposes a burden on the control plane. At the same time, because different services are handled differently, it is very difficult to require service expansion, which seriously affects the scalability and compatibility of network processor function implementation.

Summary of the invention The object of the present invention is to provide a method for implementing multi-service forwarding and a network processor, which abstracts and integrates the forwarding tables of the above three services by abstracting the common Layer 2 services, QinQ services, and L2 VPN services. The forwarding process of the above three services is designed as a process, which greatly saves the network processor instruction space and table item resources, reduces the burden on the control layer, and improves scalability and compatibility.

In order to solve the above technical problem, the present invention provides a method for implementing multi-service forwarding, including:

After receiving the packet, the virtual local area network (VLAN) information carried in the packet is parsed according to the service configuration.

Finding a forwarding identifier according to the access port information of the packet and the VLAN information;

And searching for the destination port information in the MAC address table according to the destination MAC address information carried in the packet and the forwarding identifier;

The packet is sent to the discovered destination port or the port corresponding to the forwarding identifier according to the search result. Preferably, the step of searching for the forwarding identifier according to the access port information of the packet and the VLAN information includes:

If the packet carries Layer 2 VLAN information according to the service configuration, the access port information and the Layer 2 VLAN information are calculated as a hash value according to a specific hash algorithm;

And searching, according to the hash value, the forwarding identifier in a pre-configured first mapping table.

Preferably, the step of searching for the forwarding identifier according to the access port information and the VLAN information of the text further includes:

If the forwarding identifier is not found in the pre-configured first mapping table according to the hash value, the forwarding identifier is searched in the pre-configured second mapping table according to the access port information and the outer VLAN information.

Preferably, the step of searching for the forwarding identifier according to the access port information of the packet and the VLAN information includes:

If the packet carries a layer of VLAN information or no VLAN information according to the service configuration, according to the access port information and the layer of VLAN information, or according to the access end The port information and the default VLAN information of the access port are used to look up the forwarding identifier in the pre-configured second mapping table.

Preferably, the above method further includes:

And searching, in the MAC address table, the information corresponding to the source MAC address information and the forwarding identifier carried in the packet, if the information corresponding to the source MAC address information and the forwarding identifier carried in the document is not found. Or, the information corresponding to the source MAC address information and the forwarding identifier carried in the document is found, but the discovered port information or the virtual port information is different from the access port information or the virtual port information of the packet, and then the MAC is performed. Address learning, filling source MAC address information, the forwarding identifier, and the access terminal information or virtual port information into the MAC address table.

In order to solve the above technical problem, the present invention further provides a network processor, comprising: a configuration module, configured to: after receiving the service configuration information input by the user, the port information and the VLAN information in the service configuration information Mapping to a forwarding identifier, and establishing a mapping table; the parsing module is configured to: after receiving the packet, parse the VLAN information carried by the packet according to the service configuration information of the configuration module, and parse the The output VLAN information is output to the search module.

a locating module, configured to: search for a forwarding identifier in the mapping table according to the received VLAN information and the access port information of the packet, and then, according to the found forwarding identifier and the destination MAC information carried by the packet Finding the information of the destination port in the MAC address table, and outputting the search result message to the forwarding module;

And a forwarding module, configured to send the packet to the discovered destination port or the port corresponding to the forwarding identifier according to the received search result message.

Preferably, the configuration module is configured to establish a mapping table by: if the VLAN information in the service configuration information is Layer 2 VLAN information, calculating the port information and the Layer 2 VLAN information according to a hash algorithm. a first hash value, configured with a forwarding identifier for the first hash value, to establish a first mapping table; if the VLAN information in the service configuration information is a layer of VLAN information or no VLAN information, the port is The information and the layer of VLAN information, or the port information and the default VLAN information are mapped into a forwarding identifier, and a second mapping table is established.

Preferably, the parsing module is configured to input the parsed VLAN information by: The query module is configured to: if the VLAN information carried in the packet is the Layer 2 VLAN information, calculate the access port information and the Layer 2 VLAN information carried in the packet according to the hash algorithm. a second hash value, the second hash value is output to the lookup module; the lookup module is configured to look up a forwarding identifier in the first mapping table according to the received second hash value.

Preferably, the searching module is further configured to: look up the forwarding identifier by: if the forwarding identifier is not found in the first mapping table according to the second hash value, according to the access port information and The layer VLAN information looks up the forwarding identifier in the second mapping table.

Preferably, the parsing module is further configured to: output the parsed VLAN information to the searching module by: if the VLAN information carried in the packet is a layer of VLAN information or no VLAN information, Outputting a layer of VLAN information carried in the packet or outputting the default VLAN information of the access port to the searching module;

The locating module is further configured to: search for the forwarding identifier according to the access port information and the layer of VLAN information carried by the packet, or according to the information about the access port and the lack of the access port. The provincial VLAN information looks up the forwarding identifier in the second mapping table.

Preferably, the network processor further includes a learning module,

The locating module is further configured to: search, in the MAC address table, information corresponding to the source MAC address information carried by the packet and the forwarded identifier that is found, if the information is not found The source MAC address information and the information corresponding to the found forwarding identifier, or the information corresponding to the source MAC address information and the found forwarding identifier carried in the packet, but the discovered port information or virtual port information. Different from the access port information or the virtual port information of the packet, outputting a message to the learning module;

The learning module is configured to: after receiving the message output by the searching module, perform MAC address learning, the source MAC address information carried in the document, the forwarding identifier found by the searching module, and the access port information or virtual port The information learns the MAC address table.

In summary, the method and the network processor for implementing the multi-service forwarding provided by the present invention uniformly map the key factors of the Layer 2 service forwarding to the internal forwarding identifier, and the ordinary Layer 2 service, QinQ. The service and L2 VPN services are designed with the same entries, and the same forwarding processing flow is designed at the same time, which saves resources and greatly optimizes the scalability and compatibility of the network processor. BRIEF abstract

1 is a schematic diagram of a network processor according to an embodiment of the present invention;

2 is a flow chart of a method for forwarding multi-service messages according to an embodiment of the present invention. Preferred embodiment of the invention

The core of the Layer 2 service, the single-layer VLAN and the double-layer VLAN in the QinQ service, and the VPN ID in the L2 VPN service are the key factors for the above three types of service forwarding. The core idea of the present invention is to abstract the above key factors. It is mapped to the internal forwarding identifier FID. In the forwarding process, the forwarding destination address is searched for the destination MAC address (DMAC) address and FID carried in the unified Layer 2 service, QinQ service, and VPLS service. The VPWS directly forwards the packet according to the FID. .

1 is a schematic diagram of a network processor according to an embodiment of the present invention. As shown in the figure, the network processor of this embodiment includes: a configuration module, a parsing module, a searching module, a learning module, and a forwarding module.

The configuration module is configured to: after receiving the service configuration information input by the user, mapping port information and VLAN information of various services configured by the user into a forwarding identifier FID.

Specifically, the FID can be implemented by mapping the FID through the port and the layer of the VLAN. For the FID through the port and the two-layer VLAN, the FID is directly used by the port and the two-layer VLAN. The port and the two-layer VLAN can be first calculated into a HASH value by a hash (HASH) algorithm, and then the HASH value and the FID are mapped.

For common Layer 2 services, ports of the same VLAN can apply for the same FID. As shown in Table 1, VLAN Y1 has ports XI and X2. Ports XI, X2, and VLAN Y1 in the table apply for the same FID, all of which are Nl. .

For the QinQ service, the user-configured information includes: user-side port, network-side port, inner-layer VLAN, and outer VLAN, and the network-side port is configured to resolve two-layer VLAN. The specific mapping is: For the user side, apply for an FID based on the port and inner VLAN, for the network side root The FID is applied according to the port and the two-layer VLAN. The two FID values are the same. Assume that the user-side port is X3, the network-side port is X4, the inner-layer VLAN is Y2, and the outer VLAN is Y3. As shown in Table 1, the FID of port X3 and VLAN Y2 is N2, and the network-side port X4 and VLAN Y2. The VLAN Y3 calculates the HASH value M1 through the HASH algorithm. As shown in Table 2, Ml and N2 are filled into the table.

For the L2 VPN service, if there is a port and two layers of VLAN access, configure the port to be able to resolve the two-layer VLAN. For VPLS, the same FID is configured in the same VPN, as shown in Table 1, assuming port X5. And VLAN Y5 accesses VPN 1, port X6 and VLAN Y6 also access VPN 1, and the FID of the same VPN access request is N3. For VPWS, there are also three types of VPWS access, through ports, ports, and a layer of VLANs or ports and two layers of VLANs. If port χ7 and VLAN Y7 are configured to access, apply FID N4 and the VPWS position in the table is 1 to indicate VPWS. If you configure port X8, VLAN Y8, and VLAN Y9 to access VPWS, calculate HASH value M3 based on port X8, VLAN Y8, and VLAN Y9, and apply FID N6 to the table.

Table 1

Table 2

The parsing module is configured to: when receiving the packet, according to the service configuration of the configuration module The information is parsed out of the VLAN information carried in the packet, and the VLAN information is output to the searching module. The format of the general message is: destination MAC (DMAC) + source MAC (SMAC) + VLAN tag (flag) + ETYPE + PAYLOAD, where PAYLOAD indicates the content of the message, ETYPE is the Ethernet type.

Further, the parsing module can parse the packet carried by the VLAN tag in the packet format.

The VLAN information, specifically, the VLAN information parsed by the packets of the ordinary Layer 2 service, the QinQ service, and the L2 VPN service may carry Layer 2 VLAN information, or may carry a layer of VLAN information or do not carry VLAN information.

The locating module is configured to: look up the forwarding identifier FID in the pre-configured mapping table according to the VLAN information carried in the packet and the port information of the packet, and then use the FID and the destination MAC address carried in the packet in the MAC address. The information in the table is searched for the destination port, and the search result message is output to the forwarding module.

Specifically, for the packet carrying the two-layer VLAN information, the port information carried in the packet and the two-layer VLAN are calculated into a HASH value by using the same HASH algorithm as that configured by the configuration module, and the calculated HASH value is obtained. Look for the FID in Table 2. If the corresponding FID is not found, use the port and the outer VLAN to check the mapping table, as shown in Table 1. For packets carrying a layer of VLAN, directly use the port information and VLAN information to check the mapping. For the packets without VLANs, use the port information and the default VLAN information of the port to check the mapping table. For example, if the corresponding FID is not found, the corresponding FID is not configured. abandoned.

Specifically, the lookup module searches the multi-service MAC address table according to the found FID and the destination MAC information of the packet (as shown in Table 3). If the corresponding information of the destination MAC and the FID can be found in Table 3, the destination port information corresponding to the destination MAC and the FID can be found, and then the result message of the destination port is output to the forwarding module; If the corresponding information of the MAC and the FID is not found, the result message that the destination port is not found is output to the forwarding module.

The forwarding module is configured to send the message to the port corresponding to the FID after receiving the search result message. Specifically, if the forwarding module receives the result message of finding the destination port, the forwarding module sends the message to the found destination port.

If the forwarding module receives the result message that the destination port is not found, the packet is directly If the port is the normal Layer 2 service, the port corresponding to the FID is the port in the VLAN. If the L2 VPN service is used, the port corresponding to the FID is the local member and the remote member of the VPN. For the VPWS service, it is directly forwarded according to the port corresponding to the FID.

Table 3 MAC address table

Further, the network processor of this embodiment further includes a learning module,

The locating module is further configured to: search, in the MAC address table, source MAC address information carried by the packet and corresponding information of the FID, where the corresponding information is: and source MAC address information, FID, and access port information or The information corresponding to the virtual port information is completely matched. If the information corresponding to the source MAC address information and the FID is not found, or the information corresponding to the source MAC address information and the FID is found, but the found port information or the virtual port information and the report are found. If the access port information or the virtual port information of the file is different, a message is output to the learning module;

The learning module is configured to learn the MAC address, learn the SMAC address, the FID and the access port information or the virtual port information to learn the multi-service MAC address table after receiving the message output by the search module.

The method for performing multi-service message forwarding based on the above network processor is described in detail below.

2 is a flowchart of a method for forwarding a multi-service message according to an embodiment of the present invention. The network processor receives various services configured by the user, and configures port information and VLAN information into a forwarding identifier FID in advance, and establishes port information and VLAN information. Mapping table with FID - mapping. As shown in the figure, the method for forwarding a multi-service text in this embodiment includes the following steps:

S110: The network processor receives the packet.

S120: The network processor parses the VLAN information carried in the packet according to the service configuration.

S130: Search for a pre-configured forwarding identifier FID according to the port information and the carried VLAN information.

Packets of the common Layer 2 service, QinQ service, and L2 VPN service may be carried. With a Layer 2 VLAN tag, it may carry a layer of VLAN tags or do not carry VLAN tags. In the case of carrying the Layer 2 VLAN tag, the FID can be mapped through the port and the two-layer VLAN. However, because the port and the two-layer VLAN are directly used, the FID will be used to occupy large entries. Therefore, you can pass the configuration first. A hash (HASH) algorithm calculates the port and the two layers of VLANs into a HASH value, and then maps the HASH value and the FID. For the case of carrying a layer of VLAN tags, you can implement mapping by port and a layer of VLAN mapping FID. For the case where the VLAN tag is not carried, the FID can be mapped through the port and the default VLAN to implement mapping.

Therefore, in step S131, the network processor first determines that the packet carries the VLAN information in the process of parsing the packet. If the packet carries the two-layer VLAN, the process proceeds to step S132, if the packet does not carry the VLAN or only If a layer of VLAN is carried, the process proceeds to step S133.

S132, using the HASH algorithm used in the configuration, calculating the HASH value by using the port information and the two layers of VLAN information carried in the text, and searching for a pre-configured HASH value and FID mapping table according to the calculated HASH value (for example, Table 2). If the FID corresponding to the HASH value is found, the process proceeds to step S140. If the FID corresponding to the HASH value is not found, the process proceeds to step S133.

S133. Search for the FID mapping table according to the port and the outer VLAN (for example, Table 1). If the packet does not have a VLAN, use the default VLAN of the port and the port to check the FID mapping table (for example, Table 1). If the FID is not found, the message is discarded.

Further, in S140, it is determined whether it is VPWS access, if yes, the process goes to step S180, and if not, the process goes to step S150.

Specifically, in the pre-configured mapping table (for example, Table 1 or Table 2), is the query flag

For VPWS entries, for example, the entry in Table 1 or Table 2 marked as VPWS is set to "1", indicating that the message is VPWS access.

S150. Search for the multi-service MAC table according to the source MAC and the FID that are carried in the packet. If the information corresponding to the source MAC address information and the FID is not found, or the source MAC address information and the information corresponding to the FID are found, If the found port information or the virtual port information is different from the access port information or the virtual port information of the packet, the process proceeds to step S160, otherwise, the process proceeds to step S170.

S160. The SMAC address, the FID, and the access port or the virtual port information are learned into the multi-service MAC address table. S170: Search for the multi-service MAC table according to the DMAC carried in the packet and the FID found. If the destination port information is found in the multi-service MAC table, the packet is forwarded to the found destination port, otherwise the process proceeds to step S180.

S180: The packet is broadcasted on the port corresponding to the FID. If the packet is a common Layer 2 service and a QinQ service, the broadcast port corresponding to the FID found in the multi-service MAC address is corresponding to the common Layer 2 service and the QinQ service. If the port is a VPWS service, only one destination port in the FID found in the multi-service MAC table is forwarded directly through the destination port; if it is a VPLS service, the multi-service MAC table is searched. The broadcast port corresponding to the FID is the local member and remote member of the VPN.

The above is only the embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. All modifications, equivalents, improvements, etc., made within the spirit and scope of the invention are intended to be included within the scope of the appended claims.

Industrial applicability

Compared with the prior art, the present invention uniformly maps the key factors of the Layer 2 service forwarding to the internal forwarding identifier, and designs the same entries for the common Layer 2 service, the QinQ service, and the L2 VPN service, and designs the same forwarding at the same time. The processing flow saves resources and greatly optimizes the performance of the network processor's scalability and compatibility.

Claims

Claim

1. A method for implementing multi-service forwarding, comprising:

After receiving the packet, parsing the VLAN information of the virtual local area network carried in the packet according to the service configuration; and searching for the forwarding identifier according to the access port information of the packet and the VLAN information;

According to the destination media access control MAC address information carried by the packet and the forwarding identifier,

Find the information of the destination port in the MAC address table;

The packet is sent to the discovered destination port or the port corresponding to the forwarding identifier according to the search result.

2. The method according to claim 1, wherein the step of searching for the forwarding identifier according to the access port information of the packet and the VLAN information comprises:

If the packet carries Layer 2 VLAN information according to the service configuration, the access port information and the Layer 2 VLAN information are calculated as a hash value according to a specific hash algorithm; and according to the hash. The value looks up the forwarding identifier in a pre-configured first mapping table.

The method of claim 2, wherein the step of searching for the forwarding identifier according to the access port information of the packet and the VLAN information further includes:

If the forwarding identifier is not found in the pre-configured first mapping table according to the hash value, searching for the location in the pre-configured second mapping table according to the access port information and the outer VLAN information. Said forwarding identifier.

The method of claim 1, wherein the step of searching for the forwarding identifier according to the access port information of the packet and the VLAN information comprises:

If the packet carries a layer of VLAN information or no VLAN information according to the service configuration, according to the access port information and the layer of VLAN information, or according to the access port information and the access The default VLAN information of the port is searched for in the pre-configured second mapping table.

5. The method of any of claims 1-4, further comprising:

Searching, in the MAC address table, source MAC address information and the forwarding carried in the packet And the information corresponding to the source MAC address information and the forwarding identifier carried in the document, or the information corresponding to the source MAC address information and the forwarding identifier carried in the document is not found. If the discovered port information or the virtual port information is different from the access port information or the virtual port information of the packet, the MAC address learning is performed, and the source MAC address information, the forwarding identifier, and the access port information or virtual The port information is filled in the MAC address table.

6. A network processor, comprising:

a configuration module, configured to: after receiving the service configuration information input by the user, mapping the port information and the virtual local area network VLAN information in the service configuration information to a forwarding identifier, and establishing a mapping table;

The parsing module is configured to: after receiving the packet, parse the VLAN information carried by the packet according to the service configuration information of the configuration module, and output the parsed VLAN information to the searching module;

a locating module, configured to: search for a forwarding identifier in the mapping table according to the received VLAN information and the access port information of the packet, and then access the destination media according to the found forwarding identifier and the packet Controlling the MAC information to find the information of the destination port in the MAC address table, and outputting the search result message to the forwarding module;

And a forwarding module, configured to send the packet to the searched destination port or the port corresponding to the found forwarding identifier according to the received search result message.

7. The network processor according to claim 6, wherein

The configuration module is configured to establish a mapping table by: if the VLAN information in the service configuration information is Layer 2 VLAN information, calculating the port information and the Layer 2 VLAN information as the first hash according to a hash algorithm. a value, a forwarding identifier is configured for the first hash value, and a first mapping table is established; if the VLAN information in the service configuration information is a layer of VLAN information or no VLAN information, the port information and the The layer 1 VLAN information is mapped, or the port information and the default VLAN information are mapped to a forwarding identifier, and a second mapping table is established.

8. The network processor according to claim 7, wherein

The parsing module is configured to output the parsed VLAN information to the search module by: if the VLAN information carried in the packet is parsed into Layer 2 VLAN information, according to the The hash algorithm calculates the access port information and the Layer 2 VLAN information carried in the packet as a second hash value, and outputs the second hash value to the search module.

The lookup module is configured to look up a forwarding identifier in the first mapping table according to the received second hash value.

9. The network processor according to claim 8, wherein

The searching module is further configured to: find the forwarding identifier by: if the forwarding identifier is not found in the first mapping table according to the second hash value, according to the access port information and the outer VLAN information Looking up the forwarding identifier in the second mapping table.

10. The network processor according to claim 8, wherein

The parsing module is further configured to: output the parsed VLAN information to the search module by: if the VLAN information carried in the packet is a layer of VLAN information or no VLAN information, the packet is carried One layer of VLAN information or output default VLAN information of the access port to the lookup module;

The searching module is further configured to: search for a forwarding identifier according to the access port information and the layer of VLAN information, or according to the access port information and default VLAN information of the access port; Find the forwarding identifier in the second mapping table.

The network processor according to any one of claims 6 to 10, further comprising a learning module, wherein the searching module is further configured to: search for the source MAC address information carried in the packet in the MAC address table. And the information corresponding to the forwarded identifier that is found, if the information corresponding to the source MAC address information and the forwarded identifier that is carried in the packet is not found, or the source MAC carried in the packet is found. The address information and the information corresponding to the forwarded identifier are found, but the discovered port information or the virtual port information is different from the access port information or the virtual port information of the packet, and a message is output to the learning module.

The learning module is configured to: after receiving the message output by the searching module, perform MAC address learning, source MAC address information carried in the document, forwarding identifier found by the searching module, and the access port information or virtual port The information learns the MAC address table.